Tableau Exclusive ^hot^: Offline Activation

Offline activation in Tableau is a specialized process used for environments without internet access, such as air-gapped systems or secure networks. It relies on a "handshake" of files exchanged via a secondary, internet-connected machine. Key Offline Activation Files

.tlq (Request File): Generated by the offline Tableau instance; contains unique encrypted machine and product key information.

.tlf (Response File): Generated by the Tableau Activation Site; this file is moved back to the offline computer to finalize activation. Activation Process by Product Tableau Product Activation Entry Point Tableau Desktop Help > Manage Product Keys > Activate

Enter product key -> Save .tlq -> Upload to Tableau site -> Download .tlf -> Run on offline machine. Tableau Server Tableau Services Manager (TSM)

Run tsm licenses get-offline-activation-file -> Upload to site -> Run tsm licenses activate -f [file]. Tableau Prep Requires Tableau Desktop offline activation tableau exclusive

Activate through the Desktop interface on the same machine using the Prep product key. Advanced Licensing: ATR vs. Legacy

The method of offline activation for Tableau Server depends on your licensing configuration: Activate Tableau Server Offline

How It Differs from Standard Activation

| Feature | Standard Online Activation | Offline Activation (Exclusive) | | :--- | :--- | :--- | | Internet required | Yes, at time of activation | No (transfer file via USB) | | Auto-renewal | Automatic | Manual (re-apply license file) | | Hardware binding | Soft binding (can change) | Hard binding (Tied to TPM/MAC) | | Audit trail | Cloud-based | Local only (by admin) | | Use case | SaaS, cloud, general BI | Classified, military, nuclear, zero-trust |

Critical Note: "Exclusive" also implies that you cannot mix online and offline nodes in the same Tableau Server cluster. Once you go offline, the entire deployment must be exclusive. Offline activation in Tableau is a specialized process

3. Prerequisites

• Tableau Server or Tableau Desktop (version 2020.4 or later, as offline activation changed significantly pre-2020.3).
• A management workstation with internet access (can be completely separate from the target machine).
• Product key (exclusive offline-compatible SKU—not all Tableau keys allow offline activation; confirm with your sales order).
• Offline activation file (.offline_activation_request or .tlq format) generated on the isolated machine.
• Tableau Customer Portal access (to upload the request and download the response file).

What is Offline Activation?

Instead of Tableau pinging the mothership directly, offline activation uses a request-response file system:

1. You generate a .req file from your offline machine.
2. You take that file to a computer with internet access (using a USB drive).
3. You upload it to the Tableau Licensing Portal.
4. You download a .offline activation file.
5. You bring it back to the offline server.

No direct connection ever occurs.

Part 6: Critical Limitations & Exclusions

Do not proceed with offline activation if you rely on any of the following features. In "Tableau Exclusive" offline mode, the following do NOT work:

| Feature | Why it fails | | :--- | :--- | | Tableau Online Sync | Requires outbound HTTPS to online.tableau.com | | Mapbox / Live Web Maps | Background maps download from external tile servers | | Data Sharing via Tableau Bridge | Bridge requires persistent connection to Tableau Cloud | | License Roaming | You cannot move the license to a laptop for a week. | | Automatic Product Updates | You must download patches manually on another machine and transfer via USB. | | Slack/Teams Webhooks | Alerts that post to external URLs will fail (DNS resolution fails). | How It Differs from Standard Activation | Feature

Edge Cases

• Virtual machines/cloning: support binding to virtual machine UUID and warn about cloning; provide hardware ID override.
• Time skew: if system clock tampered, rely on signed timestamps and allow manual override with strong admin auth plus evidence.
• Lost response file: allow re-issue using same request nonce within limited window.
• Emergency activation: email-based signed token with shorter validity and extra audit.

Part 3: Prerequisites for Offline Activation Tableau Exclusive

Before you attempt the activation, you need three things:

1. A Tableau Product Key with Offline Rights: Not all Tableau licenses support offline activation. You specifically need a Term License or a Perpetual License with offline entitlement. Subscription (Creator/Explorer) keys often require periodic online revalidation. Contact Tableau Sales (now Salesforce) to ensure your SKU includes "Offline Activation Exclusive."
2. A "Bridge Machine": A secondary computer with internet access. This machine does not need Tableau installed; it only needs a web browser to access the Tableau Licensing Portal (LMS - License Management System).
3. Physical Media Transfer: Typically an encrypted USB drive (exFAT or NTFS formatted) to move the .req (request) and .lic (license) files.

Step 1: Generate the Request File (Offline Machine)

Open Command Prompt or Terminal as an Administrator on the Tableau machine.

# For Tableau Server
tableau-server-activation -request-file C:\temp\activation_request.req
2.1 Government & Defense (IL4 to IL6 Environments)
US Department of Defense (DoD), NATO, and Five Eyes intelligence communities operate on networks like SIPRNet and JWICS, which have no internet gateway. Here, "offline activation tableau exclusive" is often written directly into the security requirements document (SRD).